@cuencor/shared-constants 0.0.1

package/README.md

@@ -0,0 +1,19 @@
+# @cuencor/shared-constants
+
+NATS subjects, permissions and module IDs for Cuencor Platform
+
+## Install
+
+```bash
+npm install @cuencor/shared-constants
+```
+
+## Usage
+
+```typescript
+import { ... } from '@cuencor/shared-constants';
+```
+
+## License
+
+MIT

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export * from './platform';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+// @cuencor/shared-constants � Platform constants
+__exportStar(require("./platform"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAAiD;AACjD,6CAA2B"}

package/dist/platform.d.ts

@@ -0,0 +1,62 @@
+export declare const PLATFORM_MODULE_IDS: {
+    readonly CORE: "com.finaxis.core";
+};
+export declare const PLATFORM_NATS_SUBJECTS: {
+    readonly PLATFORM: {
+        readonly MODULE_INSTALLED: "erp.platform.module.installed";
+        readonly MODULE_UNINSTALLED: "erp.platform.module.uninstalled";
+    };
+    readonly CORE: {
+        readonly USER_CREATED: "erp.core.users.created";
+        readonly USER_UPDATED: "erp.core.users.updated";
+        readonly USER_DEACTIVATED: "erp.core.users.deactivated";
+        readonly TENANT_CREATED: "erp.core.tenants.created";
+        readonly TENANT_SUSPENDED: "erp.core.tenants.suspended";
+    };
+};
+export declare const PLATFORM_PERMISSIONS: {
+    readonly USERS_READ: "core:users:read";
+    readonly USERS_WRITE: "core:users:write";
+    readonly USERS_DELETE: "core:users:delete";
+    readonly TENANTS_MANAGE: "core:tenants:manage";
+    readonly MODULES_INSTALL: "core:modules:install";
+    readonly MODULES_UNINSTALL: "core:modules:uninstall";
+    readonly ROLES_READ: "core:roles:read";
+    readonly ROLES_MANAGE: "core:roles:manage";
+    readonly DEVICES_READ: "core:devices:read";
+    readonly DEVICES_REVOKE: "core:devices:revoke";
+    readonly BRANCHES_READ: "core:branches:read";
+    readonly BRANCHES_WRITE: "core:branches:write";
+    readonly BRANCHES_DELETE: "core:branches:delete";
+};
+export declare const DB_SCHEMA: {
+    readonly PUBLIC: "public";
+    readonly tenantSchema: (tenantSlug: string) => string;
+};
+export declare const HTTP_HEADERS: {
+    readonly TENANT_ID: "x-tenant-id";
+    readonly USER_ID: "x-user-id";
+    readonly USER_ROLES: "x-user-roles";
+};
+export declare const QUEUE_NAMES: {
+    readonly EMAIL: "email-queue";
+    readonly SMS: "sms-queue";
+};
+export declare const NOTIFICATION_PERMISSIONS: {
+    readonly EMAIL_SETTINGS_READ: "core:email-settings:read";
+    readonly EMAIL_SETTINGS_WRITE: "core:email-settings:write";
+};
+export declare const REDIS_KEYS: {
+    readonly refreshToken: (userId: string) => string;
+    readonly moduleManifest: (tenantId: string) => string;
+    readonly emailSettings: (tenantId: string) => string;
+};
+export declare const JWT_CONFIG: {
+    readonly ACCESS_TTL_SECONDS: 900;
+    readonly REFRESH_TTL_SECONDS: 604800;
+};
+export declare const RATE_LIMITS: {
+    readonly GLOBAL_PER_TENANT: 1000;
+    readonly AUTH_PER_IP: 10;
+};
+//# sourceMappingURL=platform.d.ts.map

package/dist/platform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../src/platform.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,mBAAmB;;CAEtB,CAAC;AAIX,eAAO,MAAM,sBAAsB;;;;;;;;;;;;CAYzB,CAAC;AAIX,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;CAoBvB,CAAC;AAIX,eAAO,MAAM,SAAS;;wCAEO,MAAM,KAAG,MAAM;CAClC,CAAC;AAIX,eAAO,MAAM,YAAY;;;;CAIf,CAAC;AAIX,eAAO,MAAM,WAAW;;;CAGd,CAAC;AAEX,eAAO,MAAM,wBAAwB;;;CAG3B,CAAC;AAIX,eAAO,MAAM,UAAU;oCACE,MAAM,KAAG,MAAM;wCACX,MAAM,KAAG,MAAM;uCAChB,MAAM,KAAG,MAAM;CACjC,CAAC;AAIX,eAAO,MAAM,UAAU;;;CAGb,CAAC;AAEX,eAAO,MAAM,WAAW;;;CAGd,CAAC"}

package/dist/platform.js

@@ -0,0 +1,81 @@
+"use strict";
+// @cuencor/shared-constants — Platform constants (reusable across all products)
+// These constants belong to the platform core: auth, users, tenants, RBAC, messaging.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RATE_LIMITS = exports.JWT_CONFIG = exports.REDIS_KEYS = exports.NOTIFICATION_PERMISSIONS = exports.QUEUE_NAMES = exports.HTTP_HEADERS = exports.DB_SCHEMA = exports.PLATFORM_PERMISSIONS = exports.PLATFORM_NATS_SUBJECTS = exports.PLATFORM_MODULE_IDS = void 0;
+// ─── Module IDs (platform-level) ─────────────────────────────────────────────
+exports.PLATFORM_MODULE_IDS = {
+    CORE: 'com.finaxis.core',
+};
+// ─── NATS Subjects — Platform & Core ──────────────────────────────────────────
+exports.PLATFORM_NATS_SUBJECTS = {
+    PLATFORM: {
+        MODULE_INSTALLED: 'erp.platform.module.installed',
+        MODULE_UNINSTALLED: 'erp.platform.module.uninstalled',
+    },
+    CORE: {
+        USER_CREATED: 'erp.core.users.created',
+        USER_UPDATED: 'erp.core.users.updated',
+        USER_DEACTIVATED: 'erp.core.users.deactivated',
+        TENANT_CREATED: 'erp.core.tenants.created',
+        TENANT_SUSPENDED: 'erp.core.tenants.suspended',
+    },
+};
+// ─── Permissions — Platform ───────────────────────────────────────────────────
+exports.PLATFORM_PERMISSIONS = {
+    // Users
+    USERS_READ: 'core:users:read',
+    USERS_WRITE: 'core:users:write',
+    USERS_DELETE: 'core:users:delete',
+    // Tenants
+    TENANTS_MANAGE: 'core:tenants:manage',
+    // Modules
+    MODULES_INSTALL: 'core:modules:install',
+    MODULES_UNINSTALL: 'core:modules:uninstall',
+    // RBAC
+    ROLES_READ: 'core:roles:read',
+    ROLES_MANAGE: 'core:roles:manage',
+    // Devices (ISO 27001 A.9.4.2)
+    DEVICES_READ: 'core:devices:read',
+    DEVICES_REVOKE: 'core:devices:revoke',
+    // Branches
+    BRANCHES_READ: 'core:branches:read',
+    BRANCHES_WRITE: 'core:branches:write',
+    BRANCHES_DELETE: 'core:branches:delete',
+};
+// ─── Database ─────────────────────────────────────────────────────────────────
+exports.DB_SCHEMA = {
+    PUBLIC: 'public',
+    tenantSchema: (tenantSlug) => `tenant_${tenantSlug}`,
+};
+// ─── HTTP Headers ─────────────────────────────────────────────────────────────
+exports.HTTP_HEADERS = {
+    TENANT_ID: 'x-tenant-id',
+    USER_ID: 'x-user-id',
+    USER_ROLES: 'x-user-roles',
+};
+// ─── Messaging ────────────────────────────────────────────────────────────────
+exports.QUEUE_NAMES = {
+    EMAIL: 'email-queue',
+    SMS: 'sms-queue',
+};
+exports.NOTIFICATION_PERMISSIONS = {
+    EMAIL_SETTINGS_READ: 'core:email-settings:read',
+    EMAIL_SETTINGS_WRITE: 'core:email-settings:write',
+};
+// ─── Redis Keys ───────────────────────────────────────────────────────────────
+exports.REDIS_KEYS = {
+    refreshToken: (userId) => `refresh_token:${userId}`,
+    moduleManifest: (tenantId) => `module_manifest:${tenantId}`,
+    emailSettings: (tenantId) => `email_settings:${tenantId}`,
+};
+// ─── Config ───────────────────────────────────────────────────────────────────
+exports.JWT_CONFIG = {
+    ACCESS_TTL_SECONDS: 900, // 15 minutes
+    REFRESH_TTL_SECONDS: 604800, // 7 days
+};
+exports.RATE_LIMITS = {
+    GLOBAL_PER_TENANT: 1000, // req/min per tenant
+    AUTH_PER_IP: 10, // req/min for login endpoint
+};
+//# sourceMappingURL=platform.js.map

package/dist/platform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.js","sourceRoot":"","sources":["../src/platform.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,sFAAsF;;;AAEtF,gFAAgF;AAEnE,QAAA,mBAAmB,GAAG;IACjC,IAAI,EAAE,kBAAkB;CAChB,CAAC;AAEX,iFAAiF;AAEpE,QAAA,sBAAsB,GAAG;IACpC,QAAQ,EAAE;QACR,gBAAgB,EAAE,+BAA+B;QACjD,kBAAkB,EAAE,iCAAiC;KACtD;IACD,IAAI,EAAE;QACJ,YAAY,EAAE,wBAAwB;QACtC,YAAY,EAAE,wBAAwB;QACtC,gBAAgB,EAAE,4BAA4B;QAC9C,cAAc,EAAE,0BAA0B;QAC1C,gBAAgB,EAAE,4BAA4B;KAC/C;CACO,CAAC;AAEX,iFAAiF;AAEpE,QAAA,oBAAoB,GAAG;IAClC,QAAQ;IACR,UAAU,EAAE,iBAAiB;IAC7B,WAAW,EAAE,kBAAkB;IAC/B,YAAY,EAAE,mBAAmB;IACjC,UAAU;IACV,cAAc,EAAE,qBAAqB;IACrC,UAAU;IACV,eAAe,EAAE,sBAAsB;IACvC,iBAAiB,EAAE,wBAAwB;IAC3C,OAAO;IACP,UAAU,EAAE,iBAAiB;IAC7B,YAAY,EAAE,mBAAmB;IACjC,8BAA8B;IAC9B,YAAY,EAAE,mBAAmB;IACjC,cAAc,EAAE,qBAAqB;IACrC,WAAW;IACX,aAAa,EAAE,oBAAoB;IACnC,cAAc,EAAE,qBAAqB;IACrC,eAAe,EAAE,sBAAsB;CAC/B,CAAC;AAEX,iFAAiF;AAEpE,QAAA,SAAS,GAAG;IACvB,MAAM,EAAE,QAAQ;IAChB,YAAY,EAAE,CAAC,UAAkB,EAAU,EAAE,CAAC,UAAU,UAAU,EAAE;CAC5D,CAAC;AAEX,iFAAiF;AAEpE,QAAA,YAAY,GAAG;IAC1B,SAAS,EAAE,aAAa;IACxB,OAAO,EAAE,WAAW;IACpB,UAAU,EAAE,cAAc;CAClB,CAAC;AAEX,iFAAiF;AAEpE,QAAA,WAAW,GAAG;IACzB,KAAK,EAAE,aAAa;IACpB,GAAG,EAAE,WAAW;CACR,CAAC;AAEE,QAAA,wBAAwB,GAAG;IACtC,mBAAmB,EAAE,0BAA0B;IAC/C,oBAAoB,EAAE,2BAA2B;CACzC,CAAC;AAEX,iFAAiF;AAEpE,QAAA,UAAU,GAAG;IACxB,YAAY,EAAE,CAAC,MAAc,EAAU,EAAE,CAAC,iBAAiB,MAAM,EAAE;IACnE,cAAc,EAAE,CAAC,QAAgB,EAAU,EAAE,CAAC,mBAAmB,QAAQ,EAAE;IAC3E,aAAa,EAAE,CAAC,QAAgB,EAAU,EAAE,CAAC,kBAAkB,QAAQ,EAAE;CACjE,CAAC;AAEX,iFAAiF;AAEpE,QAAA,UAAU,GAAG;IACxB,kBAAkB,EAAE,GAAG,EAAE,aAAa;IACtC,mBAAmB,EAAE,MAAM,EAAE,SAAS;CAC9B,CAAC;AAEE,QAAA,WAAW,GAAG;IACzB,iBAAiB,EAAE,IAAI,EAAE,qBAAqB;IAC9C,WAAW,EAAE,EAAE,EAAE,6BAA6B;CACtC,CAAC"}

package/package.json

@@ -0,0 +1,34 @@
+{
+  "name": "@cuencor/shared-constants",
+  "version": "0.0.1",
+  "description": "NATS subjects, permissions, module IDs for Cuencor Platform",
+  "license": "MIT",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "require": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist",
+    "src"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "build:watch": "tsc -p tsconfig.build.json --watch",
+    "typecheck": "tsc --noEmit"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/cuencor/shared-constants"
+  },
+  "devDependencies": {
+    "typescript": "~5.7.2"
+  }
+}

package/src/index.ts

@@ -0,0 +1,2 @@
+// @cuencor/shared-constants � Platform constants
+export * from './platform';

package/src/platform.ts

@@ -0,0 +1,95 @@
+// @cuencor/shared-constants — Platform constants (reusable across all products)
+// These constants belong to the platform core: auth, users, tenants, RBAC, messaging.
+
+// ─── Module IDs (platform-level) ─────────────────────────────────────────────
+
+export const PLATFORM_MODULE_IDS = {
+  CORE: 'com.finaxis.core',
+} as const;
+
+// ─── NATS Subjects — Platform & Core ──────────────────────────────────────────
+
+export const PLATFORM_NATS_SUBJECTS = {
+  PLATFORM: {
+    MODULE_INSTALLED: 'erp.platform.module.installed',
+    MODULE_UNINSTALLED: 'erp.platform.module.uninstalled',
+  },
+  CORE: {
+    USER_CREATED: 'erp.core.users.created',
+    USER_UPDATED: 'erp.core.users.updated',
+    USER_DEACTIVATED: 'erp.core.users.deactivated',
+    TENANT_CREATED: 'erp.core.tenants.created',
+    TENANT_SUSPENDED: 'erp.core.tenants.suspended',
+  },
+} as const;
+
+// ─── Permissions — Platform ───────────────────────────────────────────────────
+
+export const PLATFORM_PERMISSIONS = {
+  // Users
+  USERS_READ: 'core:users:read',
+  USERS_WRITE: 'core:users:write',
+  USERS_DELETE: 'core:users:delete',
+  // Tenants
+  TENANTS_MANAGE: 'core:tenants:manage',
+  // Modules
+  MODULES_INSTALL: 'core:modules:install',
+  MODULES_UNINSTALL: 'core:modules:uninstall',
+  // RBAC
+  ROLES_READ: 'core:roles:read',
+  ROLES_MANAGE: 'core:roles:manage',
+  // Devices (ISO 27001 A.9.4.2)
+  DEVICES_READ: 'core:devices:read',
+  DEVICES_REVOKE: 'core:devices:revoke',
+  // Branches
+  BRANCHES_READ: 'core:branches:read',
+  BRANCHES_WRITE: 'core:branches:write',
+  BRANCHES_DELETE: 'core:branches:delete',
+} as const;
+
+// ─── Database ─────────────────────────────────────────────────────────────────
+
+export const DB_SCHEMA = {
+  PUBLIC: 'public',
+  tenantSchema: (tenantSlug: string): string => `tenant_${tenantSlug}`,
+} as const;
+
+// ─── HTTP Headers ─────────────────────────────────────────────────────────────
+
+export const HTTP_HEADERS = {
+  TENANT_ID: 'x-tenant-id',
+  USER_ID: 'x-user-id',
+  USER_ROLES: 'x-user-roles',
+} as const;
+
+// ─── Messaging ────────────────────────────────────────────────────────────────
+
+export const QUEUE_NAMES = {
+  EMAIL: 'email-queue',
+  SMS: 'sms-queue',
+} as const;
+
+export const NOTIFICATION_PERMISSIONS = {
+  EMAIL_SETTINGS_READ: 'core:email-settings:read',
+  EMAIL_SETTINGS_WRITE: 'core:email-settings:write',
+} as const;
+
+// ─── Redis Keys ───────────────────────────────────────────────────────────────
+
+export const REDIS_KEYS = {
+  refreshToken: (userId: string): string => `refresh_token:${userId}`,
+  moduleManifest: (tenantId: string): string => `module_manifest:${tenantId}`,
+  emailSettings: (tenantId: string): string => `email_settings:${tenantId}`,
+} as const;
+
+// ─── Config ───────────────────────────────────────────────────────────────────
+
+export const JWT_CONFIG = {
+  ACCESS_TTL_SECONDS: 900, // 15 minutes
+  REFRESH_TTL_SECONDS: 604800, // 7 days
+} as const;
+
+export const RATE_LIMITS = {
+  GLOBAL_PER_TENANT: 1000, // req/min per tenant
+  AUTH_PER_IP: 10, // req/min for login endpoint
+} as const;